General
- Target 2026-09-29_4b2104335f4bdfb40b5c1e2539dcf361_akira_rusty-stealer
- Size 453KB
- Sample260930-b5248asy9j
- SHA256 bad7320026c381fbb3db129f2b6f87fa95e34fdc09db3df0db93805c0ff70be6
- MD5 4b2104335f4bdfb40b5c1e2539dcf361
- SHA1 9cd0cdcf4194fa21d6b21721a9afe326eab8c70f
- SHA512 6d423b5a8d71492cd0adf3869899e4d0ae18579ee6e75f802e5a43729829893d381702154391e2c7bc4e72517f52395be66ed568e3fbde91ae14a6deb4e4ee2d
- SSDEEP 6144:GRMFOIo5e/5PCxwyrXvr2b17fwHc6x1yXrE80x8Aeyd3SnCj0aAzynr:a6P4nrz268e1ywFdTFSk0aAzyn
- TLSH T149A45A03F5D581F7D449C434C79A6133AA12FC4BC934BF6B9B945E21BE96B90A72C30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_4b2104335f4bdfb40b5c1e2539dcf361_akira_rusty-stealer.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_4b2104335f4bdfb40b5c1e2539dcf361_akira_rusty-stealer
- Size 453KB
- SHA256 bad7320026c381fbb3db129f2b6f87fa95e34fdc09db3df0db93805c0ff70be6
- MD5 4b2104335f4bdfb40b5c1e2539dcf361
- SHA1 9cd0cdcf4194fa21d6b21721a9afe326eab8c70f
- SHA512 6d423b5a8d71492cd0adf3869899e4d0ae18579ee6e75f802e5a43729829893d381702154391e2c7bc4e72517f52395be66ed568e3fbde91ae14a6deb4e4ee2d
- SSDEEP 6144:GRMFOIo5e/5PCxwyrXvr2b17fwHc6x1yXrE80x8Aeyd3SnCj0aAzynr:a6P4nrz268e1ywFdTFSk0aAzyn
- TLSH T149A45A03F5D581F7D449C434C79A6133AA12FC4BC934BF6B9B945E21BE96B90A72C30A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2